Emsisoft Malware-Info

Name: Adware.Win32.Work Examiner

Risklevel: Low Risk

Company: EfficientLab - http://workexaminer.com/

Description:

Work Examiner is a remote control tool that application can be used to gather information from a remote PC on the Network.It is not harmful unless installed and used without the knowledge of the computer user or network administrator.

Removal instructions for Adware Work Examiner:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Work Examiner.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Characteristics:

  • The application can be used to gather information from a remote PC on the Network.
  • It is not harmful unless installed and used without the knowledge of the computer user or network administrator.
  • Date: 2008-10-29
  • Security Level: Low Risk
  • Operating OS: WIN XP
  • Installation Type: Installed through EXE
  • Operation: After Installation
  • Time of Operation: After Installation

Installation: Installed through EXE

Process: weProConsole.exe

Screenshots:

Work ExaminerWork ExaminerWork ExaminerWork ExaminerWork ExaminerWork ExaminerWork ExaminerWork ExaminerWork ExaminerWork ExaminerWork ExaminerWork ExaminerWork ExaminerWork ExaminerWork ExaminerWork Examiner

Used folders:

  • C:\Program Files\Work Examiner Standard\ProcessedLogs2
  • C:\Program Files\Work Examiner Standard\Firebird
  • C:\Documents and Settings\[USER]\Application Data\WE\Console
  • C:\Program Files\Work Examiner Standard\Logs\failed
  • C:\Program Files\Work Examiner Standard\Logs2
  • C:\Program Files\Work Examiner Standard\Logs3
  • C:\Program Files\Work Examiner Standard\Logs
  • C:\Documents and Settings\[USER]\Application Data\WE
  • C:\Program Files\Work Examiner Standard\Firebird\bin
  • C:\Documents and Settings\[USER]\Application Data\WE\Console\Temp
  • C:\Program Files\Work Examiner Standard\Inno
  • C:\Program Files\Work Examiner Standard\Firebird\intl
  • C:\Program Files\Work Examiner Standard\FileZillaServer
  • C:\Program Files\Work Examiner Standard\Distrib
  • C:\Program Files\Work Examiner Standard\ClientOptionsRcvd
  • C:\Program Files\Work Examiner Standard\ClientOptions
  • C:\Program Files\Work Examiner Standard
  • C:\Program Files\WE_Client
  • C:\Documents and Settings\[USER]\Application Data\WE\Console\Options
  • C:\Program Files\Work Examiner Standard\Work Examiner Reports
  • C:\Documents and Settings\All Users\Start Menu\Programs\Work Examiner Standard
  • C:\Program Files\Work Examiner Standard\Icons

Used files:

  • C:\Program Files\Work Examiner Standard\FileZillaServer\libeay32.dll
    [1101824 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\Firebird\security2.fdb
    [802816 Bytes] FDB File
  • C:\Program Files\Work Examiner Standard\Firebird\firebird.log
    [786 Bytes] Text Document
  • C:\Program Files\Work Examiner Standard\Firebird\firebird.conf
    [24995 Bytes] CONF File
  • C:\Program Files\Work Examiner Standard\FileZillaServer\ssleay32.dll
    [241664 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\FileZillaServer\FileZilla Server.xml
    [4495 Bytes] XML Document
  • C:\Program Files\Work Examiner Standard\FileZillaServer\license.txt
    [18348 Bytes] Text Document
  • C:\Program Files\Work Examiner Standard\FileZillaServer\legal.htm
    [1200 Bytes] Firefox Document
  • C:\Documents and Settings\[USER]\Application Data\WE\Console\Options\opt.ini
    [26 Bytes] Configuration Settings
  • C:\Program Files\Work Examiner Standard\FileZillaServer\FileZilla server.pdb
    [3525632 Bytes] PDB File
  • C:\Program Files\Work Examiner Standard\FileZillaServer\readme.htm
    [31755 Bytes] Firefox Document
  • C:\Program Files\Work Examiner Standard\Firebird\bin\fbserver.exe
    [2899968 Bytes] Application
  • C:\Program Files\Work Examiner Standard\Firebird\bin\fbclient.dll
    [450560 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\Firebird\J-C5211032009E4.lck
    [1048576 Bytes] LCK File
  • C:\Program Files\Work Examiner Standard\Firebird\firebird.msg
    [134884 Bytes] Outlook Item
  • C:\Program Files\Work Examiner Standard\Firebird\aliases.conf
    [133 Bytes] CONF File
  • C:\Program Files\Work Examiner Standard\FileZillaServer\FzGSS.dll
    [62976 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\Firebird\bin\ib_util.dll
    [8192 Bytes] Application Extension
  • C:\Program Files\WE_Client\weClientDataTransferLog.txt
    [1752 Bytes] Text Document
  • C:\Program Files\Work Examiner Standard\we.url
    [180 Bytes] Internet Shortcut
  • C:\Program Files\Work Examiner Standard\we.sil
    [249809 Bytes] SIL File
  • C:\Program Files\Work Examiner Standard\report.fr3
    [108155 Bytes] FR3 File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Work Examiner Standard\Work Examiner Standard Help.lnk
    [592 Bytes] Shortcut
  • C:\Program Files\Work Examiner Standard\Inno\ISetup.cnt
    [1936 Bytes] CNT File
  • C:\Program Files\Work Examiner Standard\help.chm
    [2127691 Bytes] Compiled HTML Help file
  • C:\Program Files\Work Examiner Standard\FileZillaServer\FileZilla server.exe
    [628224 Bytes] Application
  • C:\Documents and Settings\All Users\Start Menu\Programs\Work Examiner Standard\Work Examiner Standard Console.lnk
    [636 Bytes] Shortcut
  • C:\Documents and Settings\All Users\Start Menu\Programs\Work Examiner Standard\Work Examiner on the Web.lnk
    [580 Bytes] Shortcut
  • C:\Documents and Settings\All Users\Start Menu\Programs\Work Examiner Standard\Client Builder.lnk
    [651 Bytes] Shortcut
  • C:\Program Files\Work Examiner Standard\Inno\islzma.dll
    [102912 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\Firebird\bin\icudt30.dll
    [1339392 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\Inno\ISCmplr.dll
    [350208 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\Inno\ISCC.exe
    [45568 Bytes] Application
  • C:\Program Files\Work Examiner Standard\Inno\Default.isl
    [16621 Bytes] ISL File
  • C:\Program Files\Work Examiner Standard\Firebird\intl\fbintl.dll
    [770048 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\Firebird\intl\fbintl.conf
    [6656 Bytes] CONF File
  • C:\Program Files\Work Examiner Standard\Firebird\bin\icuuc30.dll
    [675840 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\Firebird\bin\icuin30.dll
    [274432 Bytes] Application Extension
  • desktop+\Work Examiner Standard Console.lnk
    [624 Bytes] Shortcut
  • C:\Program Files\Work Examiner Standard\GDS32.DLL
    [450560 Bytes] Application Extension
  • C:\Program Files\WE_Client\wemon.exe
    [1219584 Bytes] Application
  • C:\Program Files\Work Examiner Standard\WE.FDB
    [12468224 Bytes] FDB File
  • C:\Program Files\WE_Client\weClientMessengerLog.txt
    [3144 Bytes] Text Document
  • C:\Program Files\Work Examiner Standard\weClientBuilder.exe
    [1208832 Bytes] Application
  • C:\Program Files\WE_Client\wecdt.exe
    [1326080 Bytes] Application
  • C:\Program Files\WE_Client\weappfltr.dll
    [44544 Bytes] Application Extension
  • C:\Program Files\WE_Client\prtct.dll
    [17408 Bytes] Application Extension
  • C:\Program Files\WE_Client\istrd15.sys
    [11520 Bytes] System file
  • C:\Program Files\WE_Client\co.ini
    [102 Bytes] Configuration Settings
  • C:\Program Files\WE_Client\AxFiltersLib.dll
    [913408 Bytes] Application Extension
  • C:\Program Files\WE_Client\anfapi.dll
    [69632 Bytes] Application Extension
  • C:\Program Files\WE_Client\wecmsg.exe
    [929792 Bytes] Application
  • C:\Documents and Settings\All Users\Start Menu\Programs\Work Examiner Standard\WE Server Manager.lnk
    [651 Bytes] Shortcut
  • C:\Program Files\Work Examiner Standard\Inno\RegSvr.e32
    [33280 Bytes] E32 File
  • C:\Program Files\Work Examiner Standard\Distrib\anfapi.dll
    [69632 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\FileZillaServer\FileZilla Server Interface.exe
    [950272 Bytes] Application
  • C:\Program Files\Work Examiner Standard\Distrib\wecdt.exe
    [1293312 Bytes] Application
  • C:\Program Files\Work Examiner Standard\Distrib\weappfltr.dll
    [44544 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\WE_Client_Lite.iss
    [8403 Bytes] ISS File
  • C:\Program Files\Work Examiner Standard\Distrib\AxFiltersLib.dll
    [913408 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\we_server.sil
    [66992 Bytes] SIL File
  • C:\Program Files\Work Examiner Standard\weServerMessengerLog.txt
    [108 Bytes] Text Document
  • C:\Program Files\Work Examiner Standard\weServerMessenger.exe
    [5136384 Bytes] Application
  • C:\Program Files\Work Examiner Standard\weServerManager.exe
    [1335808 Bytes] Application
  • C:\Program Files\Work Examiner Standard\weServerDBUpdater.txt
    [48 Bytes] Text Document
  • C:\Program Files\Work Examiner Standard\weServerDBUpdater.exe
    [1217024 Bytes] Application
  • C:\Program Files\Work Examiner Standard\weProConsole.exe
    [9181184 Bytes] Application
  • C:\Program Files\Work Examiner Standard\FileZillaServer\FileZilla Server Interface.xml
    [357 Bytes] XML Document
  • C:\Program Files\Work Examiner Standard\Distrib\wemon.exe
    [1252352 Bytes] Application
  • C:\Program Files\Work Examiner Standard\Distrib\wecmsg.exe
    [929792 Bytes] Application
  • C:\Program Files\Work Examiner Standard\Distrib\prtct.dll
    [17408 Bytes] Application Extension
  • C:\Program Files\Work Examiner Standard\Distrib\istrd15.sys
    [11520 Bytes] System file
  • C:\Program Files\Work Examiner Standard\Distrib\co.ini
    [175 Bytes] Configuration Settings

Additional information might be found here:

Search at Google for Adware Work Examiner Search at Google for Adware Work Examiner
Search at Bing for Adware Work Examiner Search at Bing for Adware Work Examiner
Search at Yahoo for Adware Work Examiner Search at Yahoo for Adware Work Examiner

How can I protect myself from Adware Work Examiner?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software